OESA-2026-1198 glibc security update

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...

SUSE CVE-2025-15281

Calling wordexp with WRDEREUSE in conjunction with WRDEAPPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

📄 Magento Adobe Commerce 2.4.5-p7 Arbitrary File Read

Magento Adobe Commerce version 2.4.5-p7 suffers from an arbitrary file read vulnerability. ============================================================================================================================================= | Title : Magento Adobe Commerce 2.4.5-p7 arbitrary file read...

Azure Linux 3.0 Security Update: glibc (CVE-2025-0395)

The version of glibc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-0395 advisory. - When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space f...

Azure Linux 3.0 Security Update: glibc (CVE-2023-4527)

The version of glibc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-4527 advisory. - A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the...

GHSA-5PF6-63V3-88HW vulnerabilities

Vulnerabilities for packages: glibc, glibc-2.43, glibc-2.44...

GHSA-XP56-6525-9CHF vulnerabilities

Vulnerabilities for packages: glibc...

CVE-2026-0915 vulnerabilities

Vulnerabilities for packages: glibc...

CVE-2026-0861 vulnerabilities

Vulnerabilities for packages: glibc, glibc-2.43, glibc-2.44...

CVE-2026-0915 vulnerabilities

Vulnerabilities for packages: glibc...

CVE-2026-0861 vulnerabilities

Vulnerabilities for packages: glibc-2.43, glibc-2.44, glibc...

GHSA-XP56-6525-9CHF vulnerabilities

Vulnerabilities for packages: glibc...

ROOT-OS-DEBIAN-11-CVE-2026-0861 CVE-2026-0861 in rootio-glibc - Patched by Root

Root has patched CVE-2026-0861 in the rootio-glibc package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-8058 CVE-2025-8058 in rootio-glibc - Patched by Root

Root has patched CVE-2025-8058 in the rootio-glibc package for Root:Debian:11. Multiple fixed versions available...

CVE-2025-15281

A flaw was found in glibc. When the wordexp function is called with the flags WRDEREUSE and WRDEAPPEND, it may return uninitialized memory. If the caller inspects the wewordv array or calls the wordfree function to free the allocated memory, the process will abort, resulting in a denial of servic...

CVE-2025-15281

Calling wordexp with WRDEREUSE in conjunction with WRDEAPPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

AZL-74819 CVE-2025-15281 affecting package glibc for versions less than 2.38-18

Calling wordexp with WRDEREUSE in conjunction with WRDEAPPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

AZL-75023 CVE-2025-15281 affecting package glibc for versions less than 2.35-10

Calling wordexp with WRDEREUSE in conjunction with WRDEAPPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

CVE-2025-15281 wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

Calling wordexp with WRDEREUSE in conjunction with WRDEAPPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

MiracleLinux 9 : glibc-2.34-100.el9_4.2 (AXSA:2024-8145:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8145:06 advisory. glibc: Out of bounds write in iconv conversion to ISO-2022-CN-EXT CVE-2024-2961 glibc: stack-based buffer overflow in netgroup cache CVE-2024-33599...